Questions tagged [juniper]

A tag for questions involving Juniper Networks hardware or software.

Filter by
Sorted by
Tagged with
2
votes
2answers
79 views

Noobie network question: connect routers across floors

I have a Cisco router and a Juniper SRX550 sitting next to each other. The Cisco router is on two networks, and the SRX550 is on 3 networks. Since they're close, I could connect them directly? If I ...
5
votes
1answer
726 views

Source NAT on Juniper SRX300

I'm having issues setting up the Source NAT on my SRX300 firewall. The firewall is connected to an LC-panel through a fibre optic cable in port 0/6. I have set the public ip on that interface and have ...
3
votes
2answers
145 views

Connect Cisco 2900 to Juniper SRX550

I need to connect a Cisco 2900 router (172.16.0.0) to a Juniper SRX550 (172.16.128.1 & 172.16.192.1). As far as I know, Cisco 2900 have no VLANs, so it's on VLAN 1. The Juniper SRX550 have ...
6
votes
2answers
466 views

Issues with Juniper MX-series iBGP routes

I have a simple setup: 2x Juniper MX-Series routers each having one uplink to a transit provider iBGP session between both routers (point-to-point) For testing purposes I've disabled the uplink from ...
4
votes
1answer
910 views

What is the exact meaning of routes in Juniper tagged with @ and #

The routing table explains the meaning of these symbols as: @ = Routing Use Only, # = Forwarding Use Only + = Active Route, - = Last Active, * = Both However, I am looking for more detailed meaning ...
2
votes
1answer
2k views

DHCP relay on Juniper MX

Hi I got a problem with bootp relay on a juniper router(s). I got helpers bootp interface configured with: irb.10 broadcast server 10.20.1.10 server 10.20.1.11 theres several irb ...
1
vote
1answer
138 views

how do you see what traffic is being forwarded to a static route?

I have Juniper SRX I created this static route (in inet.0): 10.123.123.0/24 *[Static/5] 21:52:24 > to 192.123.123.100 via ge-0/0/2.0 How do I view what traffic is being ...
3
votes
1answer
301 views

Config BGP policy for limit ISP path in Juniper MX 480 Router

Now we have a source IP14.135.4.0/24, we are involved in 5 different ISP, such as A, B, C, D, E. Now we want to access 14.135.4.0/24 not through the path of ISP B and ISP D, but through the other ...
2
votes
1answer
2k views

How to check the Juniper Switch's port bandwidth?

I use the CoS method limited the EX3300's switch port bandwidth to 200m. But I have a question, how to check whether it works? Is there the Juniper Switch EX3300's switch port have a bandwidth ...
3
votes
1answer
159 views

Interfaces Shutdown after JunOS Firmware Upgrade

So I've got some Juniper EX4500's. They're configured as a Virtual Chassis using the SFP+ ports. Due to the distance between racks, I wasn't able to use the VCP ports. Anyway, I've run into an ...
1
vote
2answers
2k views

How can I set the Juniper EX3300 Switch's Interface traffic speed?

How can I set the Juniper EX3300 Switch's Interface traffic speed? Before asking this question I have attempted many methods, all fail. first of all, set the Interface traffic speed is not the ...
2
votes
1answer
786 views

Junos IPSEC Tunnel to Azure & TCP-MSS

I am configuring a Juniper SRX 300 Series to establish an IPSEC tunnel to Azure. The Azure Vnet range is 192.168.10.0/23 The local range is 10.49.236.0/24. The configuration: (relevant bits with ...
5
votes
1answer
1k views

JunOS iBGP session not establishing

I have a test environment set up with two Juniper vSRX instances and a L2 network trunked between them and can reach each other on the IP addresses I'm trying to peer them on. vSRX 1 has an external ...
1
vote
2answers
3k views

Can we have multiple AS number in the same router?

Is it possible to have multiple AS number in the same router? Example: Routing-Instance A for AS100 and Routing-Instance B for AS200 ? Please share me some example or configuration.
2
votes
2answers
599 views

How to connect high-availability routers to high-availability firewalls

I have two Juniper routers (a SRX340 and a SRX320), each with a leased line, on the same IP range. They are designed to be connected together on specific network ports so that the SRX320 takes over if ...
4
votes
1answer
841 views

Partially Faulty QSFP+ breakout port - possible config error?

Network Equipment: Juniper Ex4600, 40GbE QSFP+ -> 4x 10GbE SFP+ DAC cable, Mellanox ConnectX-2 Problem: One of the SFP+ physical link cannot be brought up (xe-0/0/25:0 Physical Link Down, xe-0/0/25:1,...
1
vote
1answer
2k views

Result of running `restart ipsec-key-management`

I have Juniper SRX 1400 which is used mainly for IPSEC tunnels. And now I facing a bug in firmware with ID PR1085657 (IKE doesn't come up when the SRX is the initiator). Possible solutions to this is ...
2
votes
1answer
448 views

Why the EX4300 continue the system halting?

Why the EX4300 continue the system halting? In the LCD, I press to the system halt, then it last this HALTING status a very long time. so far, there take 20+ minutes at least.
2
votes
1answer
7k views

What's the meaning of `unit 0` and `family inet`?

In my JunOS configure mode, I show the interfaces: [edit] root@Olive# show interfaces em0 { unit 0 { family inet { address 192.168.47.2/24 } } } em1 { vlan-...
2
votes
1answer
36 views

How can I see the new changed configurations in the configure mode?

In JUNOS, and in the configure mode, I edited something, now if I want to quit the edit mode, how can I check what I have new changed? my questions are bellow: show the changed configurations(...
2
votes
1answer
2k views

ERROR: Package signature validation failed. Aborting install. When upgrade the JUNOS

My device is EX4300. I use the bellow command for upgrade the JUNOS version by: request system software add reboot /var/tmp/jinstall-ex-4300-14.1X53-D47.3-demostic-signed.tgz I get the bellow error:...
2
votes
1answer
1k views

Site-to-site IPSEC for multiple peers with dynamic IP on Juniper SRX

Looking for possible solution. I have Juniper SRX 1400 (12.1X47-D20.7) with static WAN IP in data-center and multiple sites with dynamic WAN IP addresses. I need to build with them site-to-site VPN's....
1
vote
0answers
72 views

cannot push the ios for juniper ex3300 [closed]

I am trying to push the JUNOS image for a Juniper EX3300 from a TFTP server. First I set IP address, netmask and server IP, then I started the install. But it shows cannot open package(error 60) ...
1
vote
1answer
293 views

Which regex flavor is used in the Junos CLI?

I'm trying to do some regex matching in the Junos CLI, like show configuration | match "fancy.pants(reg|ex)". I especially want to look for word boundaries and other character classes. I'm used to \b, ...
2
votes
2answers
700 views

How to test if an sfp is working on juniper qfx5100

How to test if an sfp is working on juniper qfx5100 My manager asked me to test if a 3rd party sfp is working on juniper !! what tests can i run on it to compare different company test equipment ? ...
2
votes
1answer
2k views

What's the purpose of JUNOS' sfid process?

In the last few days, one Juniper EX-2200-48P has started complaining via syslog: Jun 21 12:50:03 ex2200-b sfid[717]: TASK_OS_MEMHIGH: Using 52118 KB of memory, 103 percent of available After a ...
4
votes
1answer
169 views

understanding naming of Junos routing tables

Am I correct that master RI in Junos can have one and only one inet.0 table and each user-defined RI can have only one <RI_name>.inet.0 table? Also, master RI can have a single inet6.0 table and ...
4
votes
1answer
95 views

How does Junos distinguish that route is learned in Layer 3 or Layer 2 VPN environment?

As I understand from Understanding Junos OS Routing Tables document, then bgp.l3vpn.0/bgp.l3vpn-inet6.0 or bgp.l2vpn.0 tables contain routes learned from other PE routers in Layer 3 or Layer 2 VPN ...
3
votes
1answer
13k views

How to show the MAC table for interfaces on a Junos Virtual Chassis member?

I'm using this command to show the MAC address table on a Juniper EX4500 series Virtual Chassis with 2 members: show ethernet-switching table The results show only interfaces for the Virtual ...
3
votes
2answers
768 views

Junos complex regular expressions question

I saw this explanation in the JNCIS study guide book ch1 (community regex examples) and i'm a bit confused: ^65000:.{2,3}$ - AS number is 65000, community value is any 2 or 3 digit number ex. 65000:...
3
votes
1answer
754 views

Juniper SRX 240 Routing Configuration

I am working with a Juniper SRX 240 as an aggregation routing device, it connects a Desktop (Workstation) environment over an access switch port to several (4) server environments behind Cisco Layer 2 ...
2
votes
1answer
230 views

How do you schedule traffic that exits via a bridge-domain?

I've got a single MX router connected to two physical interfaces on an SRX chassis cluster - each interface being a member of a reth interface. In order to make this work, on the MX side I have the ...
1
vote
1answer
228 views

CanI prevent a secondary DHCP server on the LAN from taking over from SRX Juniper's DHCP?

I have admin access to a SRX550 Juniper, but I cannot get help from Juniper or joint their boards because the Juniper belongs to Century Link, not us. I have the following: # show system services ...
2
votes
1answer
3k views

SonicWall is dropping encrypted packets with error "sonicwall ipsec vpn decryption failed selector check error"

I have implemented a Site-to-Site IPsec tunnel between a Juniper SSG firewall and a SonicWall. However, any traffic that I send over the tunnel gets dropped on the SonicWall with an error saying ...
3
votes
1answer
828 views

How can I monitor SSH or HTTPS activity on Juniper SRX 240 firewall?

In Junos is there any way I can monitor SSH or HTTPS login activity though logs? I would like to receive alerts if there are any changes made in the current config.
7
votes
2answers
1k views

Can Junos show a matching config statement in context, like IOS `| section`?

Hard to describe what I'm asking. For example, here's a section of my config, with the full hierarchy: interfaces { ge-0/1/9 { vlan-tagging; unit 100 { description "my ...
4
votes
1answer
253 views

Can I get what filters are applied to an interface via SNMP?

I have some firewall filters on juniper devices- ex3300s make up the majority of them. I've been looking for an oid that will let me associate an IFL with the filters that are on it, and I've yet to ...
0
votes
1answer
294 views

Juniper SRX 240H latency going on with HA Cluster. Are there any steps to troubleshoot the issue?

Currently we are having a latency issue between a Juniper HA cluster and a Cisco switch c3750. We have LACP configured between them. reth3 { vlan-tagging; redundant-ether-options { redundancy-group 1;...
2
votes
1answer
111 views

Juniper JunOS routing issue in v15.1.49

I have a Cisco Nexus that has a few vlans on it - total network size is 172.26.64.0/20 split into /24 vlans - each using the third octet as the vlan ID. It's IP is 172.26.x.254 on each vlan as the ...
1
vote
0answers
732 views

2x Juniper SRX300 RETH interface on multiple interfaces [closed]

We have two SRX300 boxes in a chassis cluster. I have configured the RETH0 interface for WAN communication and assigned 1 port on the first unit and 1 port at the second unit. I have setup reth1 ...
4
votes
1answer
843 views

EVPN/VXLAN RD & RT

I was reading through this example on Juniper's EVPN/VXLAN documentation and I can't understand why I need two different Route-Distinguishers and Route-Targets. The RD & RT in the VRF instance is ...
1
vote
1answer
644 views

Traffic flow for internal traffic in Juniper SRX 650

I would like to know whether the Juniper SRX by default allows all the source and destination ports if all the devices are from the internal networking range. For eg, Src-10.10.x.x SrcPrt-any Des-10....
2
votes
1answer
79 views

Is it possible to use the console on a Juniper EX for outbound connections?

I want to connect two EX switches by console cable and want to use this connection to open a console session from one EX to the other. I found no "offical" way to do this but maybe someone else has ...
3
votes
1answer
1k views

Juniper SRX BGP based ECMP not working as expected

Overview I am trying to setup BGP based ECMP to two end servers that sit on separate subnets/VLANs and advertise out the same IP address to a SRX firewall. The end nodes are linux boxes running BIRD ...
5
votes
2answers
546 views

Juniper: WakeOnLan over 802.1x without using default VLAN

Case We have a working 802.1x configuration on all our access ports. I want to enable WakeOnLan, but have no idea, how to target computers with Magic Packet. Tests We tried to send Magic Packet ...
2
votes
1answer
205 views

Juniper SSG Split DNS not working over tunnel

I am trying to get the DNS Proxy feature working in an SSG5 (Side B). The other side of the VPN is an SSG140 (Side A). The DNS server is on Side A. foo.com should send DNS queries to 192.168.1.2 (...
4
votes
1answer
165 views

What are the uses of clocking and timing ports on Juniper routers

There are 4 ports each named "Ext Ref clock", "TOD", "1PPS", "10Mhz" on MX104. I understand what each stands for and have vague idea of each after googling but what are they used for in real world?
3
votes
1answer
1k views

EX3300: Voice VLAN stopped working after upgrade to 15.1R6.7

We have 50+ Juniper EX3300 switches with access points configured to work with dot1x and voice vlan. We also have a variety of Yealink T23G, T42G, T26G and T48G phones that worked perfectly in our ...
2
votes
1answer
2k views

Cisco Route Map equivalent in Juniper JUNOS

Here is a scenario and working route-map example for Policy base routing. I'm new Junos i'm struggling with Firewall filters and Policy-statements in Junos. Can you help me to convert this simple ...
1
vote
1answer
1k views

Why is blocked edge port still forwarding in RSTP on Juniper EX Switch?

I have one EX Switch connected to my laptop on port ge-0/0/9 set protocols rstp interface ge-0/0/9 edge set protocols rstp bpdu-block-on-edge commit root> show spanning-tree interfaces it still ...

1
3 4
5
6 7
10